Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/SoftEtherVPN/SoftEtherVPN.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-08-14Network.h: include forgotten pthread.h for MacOS toobarracuda156
2023-08-09Merge pull request #1877 from chipitsine/masterIlya Shipitsin
CI: get rid of travis-ci coverity wrapper
2023-08-08Bind outgoing connection to a specific IP address No.2hiura
2023-08-08CI: get rid of travis-ci coverity wrapperIlya Shipitsin
2023-08-07Merge pull request #1869 from metalefty/bsdunixvlan-groupIlya Shipitsin
Cedar/VLanUnix: assign virtual interface to softether group
2023-08-07Merge pull request #1876 from chipitsine/fedora_rawhideIlya Shipitsin
CI: introduce monthly Fedora Rawhide builds
2023-08-06Merge pull request #1775 from domosekai/radius2Yihong Wu
Support more EAP methods for RADIUS auth
2023-08-06CI: introduce monthly Fedora Rawhide buildsIlya Shipitsin
Fedora Rawhide includes latest compilers
2023-08-06Merge pull request #1873 from icy17/masterIlya Shipitsin
fix potential crash.
2023-07-30fix potential crash.icy17
2023-07-05Merge PR #1866: Translate GenX25519/GetPublicX25519 commandDavide Beatrici
2023-07-05Merge PR #1865: Fix build when NO_VLANDavide Beatrici
2023-07-04Cedar/VLanUnix: assign virtual interface to softether groupKoichiro IWAO
Interface grouping is available on FreeBSD and OpenBSD. This will allow you to enumerate only SoftEther virtual interfaces or exclude SoftEther virtual interfaces, and be helpful when making custom scripts to start DHCP client when virtual interface become up (=VPN connection established) for example. Usage examples as follows. List all interfaces' names available on the system: ``` $ ifconfig -l vtnet0 lo0 vpn_client0 vpn_client1 vpn_client2 ``` Display a list of SoftEther virtual interfaces: ``` $ ifconfig -g softether vpn_client0 vpn_client1 vpn_client2 ``` Display details about SoftEther virtual interfaces that are up: ``` $ ifconfig -a -u -g softether vpn_client0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 description: SoftEther Virtual Network Adapter options=80000<LINKSTATE> ether 5e:71:fa:f8:91:4a hwaddr 58:9c:fc:10:34:2a groups: tap softether media: Ethernet autoselect status: active nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL> Opened by PID 1445 ``` Display details about interfaces except for SoftEther virtual interfaces: ``` $ ifconfig -a -G softether vtnet0: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=80028<VLAN_MTU,JUMBO_MTU,LINKSTATE> ether 58:9c:fc:00:f0:23 inet6 fe80::5a9c:fcff:fe00:f023%vtnet0 prefixlen 64 scopeid 0x1 inet 192.168.96.7 netmask 0xffffff00 broadcast 192.168.96.255 media: Ethernet autoselect (10Gbase-T <full-duplex>) status: active nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384 options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6> inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 inet 127.0.0.1 netmask 0xff000000 groups: lo nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL> ```
2023-07-04Merge PR #1868: Fix build on __FreeBSD_version >= 140091 (LLVM 16)Davide Beatrici
2023-07-04Fix build on __FreeBSD_version >= 140091 (LLVM 16)Koichiro Iwao
Fails to build after: https://cgit.freebsd.org/src/commit/?id=a681cba16d8967651a2146385ce44a2bfeb1c4c3 As the commit title is "Bump __FreeBSD_version for llvm 16.0.6 merge", I suppose LLVM 16 is stricter than LLVM 15. It was building successfully at least the previous week. Build log: https://pkg-status.freebsd.org/beefy18/data/main-amd64-default/p4785b313b958_se8efee297c/logs/softether5-5.02.5180.335,2.log ``` [ 32%] Building C object src/Mayaqua/CMakeFiles/mayaqua.dir/Unix.c.o cd /wrkdirs/usr/ports/security/softether5/work/.build/src/Mayaqua && /usr/bin/cc -DBRIDGE_BPF -DCPU_64 -DHAVE_SSL_CTX_SET_NUM_TICKETS -DNDEBUG -DOS_UNIX -DREENTRANT -DSE_DBDIR=\"/var/db/softether\" -DSE_LOGDIR=\"/var/log/softether\" -DSE_PIDDIR=\"/var/run/softether\" -DSE_TAGNAME=\"5.02.5180-335-g1c0bdb0c/freebsd\" -DTHREADSAFE -DTHREAD_SAFE -DUNIX -DUNIX_BSD -DVPN_SPEED -D_FILE_OFFSET_BITS=64 -D_REENTRANT -D_THREADSAFE -D_THREAD_SAFE -Dmayaqua_EXPORTS -I/wrkdirs/usr/ports/security/softether5/work/SoftEtherVPN-5.02.5180-335-g1c0bdb0c/src/. -I/wrkdirs/usr/ports/security/softether5/work/SoftEtherVPN-5.02.5180-335-g1c0bdb0c/src/Mayaqua/. -I/wrkdirs/usr/ports/security/softether5/work/SoftEtherVPN-5.02.5180-335-g1c0bdb0c/src/libhamcore/include -O2 -pipe -I/usr/local/include/cpu_features -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing -fsigned-char -O2 -pipe -I/usr/local/include/cpu_features -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing -DNDEBUG -O2 -std=gnu99 -fPIC -pthread -MD -MT src/Mayaqua/CMakeFiles/mayaqua.dir/Unix.c.o -MF CMakeFiles/mayaqua.dir/Unix.c.o.d -o CMakeFiles/mayaqua.dir/Unix.c.o -c /wrkdirs/usr/ports/security/softether5/work/SoftEtherVPN-5.02.5180-335-g1c0bdb0c/src/Mayaqua/Unix.c /wrkdirs/usr/ports/security/softether5/work/SoftEtherVPN-5.02.5180-335-g1c0bdb0c/src/Mayaqua/Unix.c:259:18: error: incompatible function pointer types assigning to 'void (*)(int, struct __siginfo *, void *)' from 'void *(int, siginfo_t *, void *)' (aka 'void *(int, struct __siginfo *, void *)') [-Wincompatible-function-pointer-types] sa.sa_sigaction = signal_received_for_ignore; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ ```
2023-07-03Merge pull request #1863 from metalefty/bsdunixvlan-bridgeIlya Shipitsin
FreeBSD: Make sure to destroy tap device for bridge
2023-06-28bind outgoing connectionhiura
2023-06-21Translate GenX25519/GetPublicX25519 commandKoichiro Iwao
2023-06-21Fix case of WireGuardKoichiro Iwao
2023-06-16Fix build when NO_VLANKoichiro IWAO
Occurred at: #670 Closes: #1864 Tested build on FreeBSD with NO_VLAN by modifying CMakeLists.txt like this: ```diff diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt index c49a3c78..1dad3691 100644 --- a/src/CMakeLists.txt +++ b/src/CMakeLists.txt @@ -93,6 +93,7 @@ if(UNIX) if(${CMAKE_SYSTEM_NAME} STREQUAL "FreeBSD") add_definitions(-DUNIX_BSD -DBRIDGE_BPF) + add_definitions(-DNO_VLAN) include_directories(SYSTEM /usr/local/include) link_directories(SYSTEM /usr/local/lib) endif() ```
2023-06-16Collect garbage at developmentKoichiro IWAO
2023-06-15Remove unnecessary quotation to fix buildKoichiro IWAO
2023-06-14Rename macro BRDEST -> BRIDGE for simplicityKoichiro IWAO
UNIX_VLAN_BRDEST_IFACE_PREFIX -> UNIX_VLAN_BRIDGE_IFACE_PREFIX
2023-06-14Cedar/BridgeUnix: make sure to destroy tap device for bridge on FreeBSDKoichiro IWAO
Also, rename NewTap/FreeTap to NewBridgeTap/FreeBridgeTap because these functions are used to create/destroy tap device used for bridge destination.
2023-06-14Cedar: Don't hardcode prefix for virtual brige destinationKoichiro IWAO
2023-06-08Merge PR #1860: Cedar/VLanUnix: add description to FreeBSD tap deviceDavide Beatrici
2023-06-01Cedar/VLanUnix: add description to FreeBSD tap deviceKoichiro IWAO
$ ifconfig vpn_client vpn_client: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 description: SoftEther Virtual Network Adapter options=80000<LINKSTATE> ether 5e:51:5e:48:ea:ef hwaddr 58:9c:fc:10:34:2a groups: tap media: Ethernet autoselect status: active nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL> Opened by PID 35981
2023-06-01Merge PR #1859: FreeBSD: Improve client's virtual network interface handlingDavide Beatrici
2023-06-01Cedar/VLanUnix: use space after #ifdefKoichiro IWAO
2023-06-01Cedar/VLanUnix: add UnixDestroyTapDevice prototype declarationKoichiro IWAO
2023-05-31Cedar/Client: Enable CtVLans{Up,Down} on FreeBSDKoichiro IWAO
The same trick also works on FreeBSD. There's no reason to limit it to Linux.
2023-05-31Cedar/VLanUnix: Enable UnixVLanSetState on FreeBSDKoichiro IWAO
2023-05-31Cedar/VLanUnix: Make NicDelete work on FreeBSDKoichiro IWAO
In contrast to Linux, FreeBSD's tap devices are still plumbed after fd closed. The tap device must be destroyed in addition to closing fd to delete virtual network interfaces used for VPN connection. NicDelete command now works properly and virtual network interfaces used by vpnclient are cleaned up when shutting down vpnclient.
2023-05-31Cedar: Don't hardcode prefix for UNIX virtual network interfaceKoichiro IWAO
2023-05-21Merge pull request #1845 from chipitsine/masterIlya Shipitsin
introduce security policy, add security reporting link to README.md
2023-05-14add github security reporting to README.mdIlya Shipitsin
2023-05-14introduce security policyIlya Shipitsin
2023-05-13Merge pull request #1832 from chipitsine/masterIlya Shipitsin
src/Cedar/Server.c: fix race condition
2023-05-01Merge pull request #1833 from chipitsine/coverity_fixIlya Shipitsin
several potential null pointer dereferences fix
2023-05-01src/Mayaqua/Secure.c: fix potential null pointer dereferenceIlya Shipitsin
found by coverity CID 343528 (#1 of 1): Dereference before null check (REVERSE_INULL) check_after_deref: Null-checking name suggests that it may be null, but it has already been dereferenced on all paths leading to the check. 438 if (name == NULL || k == NULL || k->private_key == false) 439 { 440 sec->Error = SEC_ERROR_BAD_PARAMETER; 441 return false; 442 }
2023-05-01src/Mayaqua/Secure.c: fix potential null pointer dereferenceIlya Shipitsin
found by coverity CID 343537 (#1 of 1): Dereference before null check (REVERSE_INULL) check_after_deref: Null-checking name suggests that it may be null but it has already been dereferenced on all paths leading to the check. 664 if (name == NULL) 665 { 666 sec->Error = SEC_ERROR_BAD_PARAMETER; 667 return false; 668 }
2023-05-01src/Mayaqua/Secure.c: fix potential null pointer dereferenceIlya Shipitsin
found by coverity CID 343536 (#1 of 1): Dereference before null check (REVERSE_INULL) check_after_deref: Null-checking name suggests that it may be null, but it has already been dereferenced on all paths leading to the check. 1339 if (name == NULL || data == NULL || size == 0) 1340 { 1341 sec->Error = SEC_ERROR_BAD_PARAMETER; 1342 return false; 1343 }
2023-05-01src/Cedar/Server.c: fix race conditionIlya Shipitsin
================================================================= ==1505093==ERROR: AddressSanitizer: heap-use-after-free on address 0x607000366b88 at pc 0x7f72afadc34a bp 0x7f72990fa390 sp 0x7f72990fa388 READ of size 4 at 0x607000366b88 thread T22 #0 0x7f72afadc349 in GetCaps /home/ilia/SoftEtherVPN/src/Cedar/Server.c:1861 #1 0x7f72afadc382 in GetCapsInt /home/ilia/SoftEtherVPN/src/Cedar/Server.c:1802 #2 0x7f72afaf72a5 in GetServerCapsInt /home/ilia/SoftEtherVPN/src/Cedar/Server.c:1098 #3 0x7f72afaf7318 in GetServerCapsBool /home/ilia/SoftEtherVPN/src/Cedar/Server.c:1104 #4 0x7f72afaf771e in SiWriteHubCfg /home/ilia/SoftEtherVPN/src/Cedar/Server.c:4887 #5 0x7f72afaf771e in SiWriteHubCfg /home/ilia/SoftEtherVPN/src/Cedar/Server.c:4824 #6 0x7f72afaf7c0b in SiWriteHubs /home/ilia/SoftEtherVPN/src/Cedar/Server.c:5548 #7 0x7f72afaf7c0b in SiWriteHubs /home/ilia/SoftEtherVPN/src/Cedar/Server.c:5515 #8 0x7f72afaf81d6 in SiWriteConfigurationToCfg /home/ilia/SoftEtherVPN/src/Cedar/Server.c:3166 #9 0x7f72afaf86bc in SiWriteConfigurationFile /home/ilia/SoftEtherVPN/src/Cedar/Server.c:6593 #10 0x7f72afaf86bc in SiWriteConfigurationFile /home/ilia/SoftEtherVPN/src/Cedar/Server.c:6569 #11 0x7f72afaf8914 in SiSaverThread /home/ilia/SoftEtherVPN/src/Cedar/Server.c:6561 #12 0x7f72afaf8914 in SiSaverThread /home/ilia/SoftEtherVPN/src/Cedar/Server.c:6547 #13 0x7f72af6e0cfa in ThreadPoolProc /home/ilia/SoftEtherVPN/src/Mayaqua/Kernel.c:872 #14 0x7f72af6e0cfa in ThreadPoolProc /home/ilia/SoftEtherVPN/src/Mayaqua/Kernel.c:827 #15 0x7f72af76eeb4 in UnixDefaultThreadProc /home/ilia/SoftEtherVPN/src/Mayaqua/Unix.c:1604 #16 0x7f72af4ffc56 in start_thread (/lib64/libc.so.6+0x8cc56) (BuildId: 6107835fa7d4725691b2b7f6aaee7abe09f493b2) #17 0x7f72af585a6f in __clone3 (/lib64/libc.so.6+0x112a6f) (BuildId: 6107835fa7d4725691b2b7f6aaee7abe09f493b2) 0x607000366b88 is located 24 bytes inside of 72-byte region [0x607000366b70,0x607000366bb8) freed by thread T0 here: #0 0x7f72afed7fc8 in __interceptor_free.part.0 (/lib64/libasan.so.8+0xd7fc8) (BuildId: 9501248886f79bf1482f3e153f794be742818172) #1 0x7f72af76ed6f in UnixMemoryFree /home/ilia/SoftEtherVPN/src/Mayaqua/Unix.c:2072 previously allocated by thread T22 here: #0 0x7f72afed92ff in malloc (/lib64/libasan.so.8+0xd92ff) (BuildId: 9501248886f79bf1482f3e153f794be742818172) #1 0x7f72af76f35d in UnixMemoryAlloc /home/ilia/SoftEtherVPN/src/Mayaqua/Unix.c:2053 Thread T22 created by T0 here: #0 0x7f72afe48966 in pthread_create (/lib64/libasan.so.8+0x48966) (BuildId: 9501248886f79bf1482f3e153f794be742818172) #1 0x7f72af76f713 in UnixInitThread /home/ilia/SoftEtherVPN/src/Mayaqua/Unix.c:1683 SUMMARY: AddressSanitizer: heap-use-after-free /home/ilia/SoftEtherVPN/src/Cedar/Server.c:1861 in GetCaps Shadow bytes around the buggy address: 0x607000366900: 00 00 00 fa fa fa fa fa 00 00 00 00 00 00 00 00 0x607000366980: 00 fa fa fa fa fa 00 00 00 00 00 00 00 00 00 fa 0x607000366a00: fa fa fa fa 00 00 00 00 00 00 00 00 00 fa fa fa 0x607000366a80: fa fa 00 00 00 00 00 00 00 00 00 fa fa fa fa fa 0x607000366b00: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fd fd =>0x607000366b80: fd[fd]fd fd fd fd fd fa fa fa fa fa fd fd fd fd 0x607000366c00: fd fd fd fd fd fa fa fa fa fa fd fd fd fd fd fd 0x607000366c80: fd fd fd fa fa fa fa fa fd fd fd fd fd fd fd fd 0x607000366d00: fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x607000366d80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x607000366e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8
2023-04-30Merge pull request #1831 from chipitsine/masterIlya Shipitsin
src/Mayaqua/Unix.c: fix guarding
2023-04-29src/Mayaqua/Unix.c: fix guardingIlya Shipitsin
SoftEtherVPN/src/Mayaqua/Unix.c:51:25: warning: missing terminating ' character 51 | #include <sys/statvfs.h>'
2023-04-22Merge pull request #1829 from chipitsine/masterIlya Shipitsin
src/Mayaqua/Str.c: fix denial of service reported by Cisco Talos
2023-04-22Merge pull request #1828 from chipitsine/cleanup_source_release_pipelineIlya Shipitsin
Cleanup source release pipeline
2023-04-21src/Mayaqua/Str.c: fix denial of service reported by Cisco TalosIlya Shipitsin
TALOS-2023-1741 CVE-2023-23581 SoftEther VPN vpnserver EnSafeHttpHeaderValueStr denial of service vulnerability A denial of service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially-crafted network packet can lead to denial of service.
2023-04-21CI: modernize GH release creationIlya Shipitsin
details: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
2023-04-21CI: drop AppVeyor source release creation in favour of GH ActionsIlya Shipitsin
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-01 07:14:27 +0300